CVE-2024-13327

Name of the Vulnerable Software and Affected Versions Musicbox WordPress plugin versions 2.0.3 and earlier

Description The issue arises from the Musicbox WordPress plugin not sanitizing and escaping a parameter before outputting it back in the page. This leads to a Reflected Cross-Site Scripting that could be used against high privilege users, such as administrators.

Recommendations For Musicbox WordPress plugin versions 2.0.3 and earlier, update to a version later than 2.0.3 to resolve the issue. As a temporary workaround, consider restricting access to the plugin's functionality to minimize the risk of exploitation.